last executing test programs: 4.323269556s ago: executing program 3 (id=4): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 3.926816186s ago: executing program 3 (id=9): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xa, 0x9, r0, &(0x7f00000002c0), 0x0, 0x3}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd70003401f0c2076cb4ad080001"], 0x24}}, 0x4045840) 3.430061228s ago: executing program 3 (id=11): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs(r0, 0x0) 3.123353895s ago: executing program 0 (id=1): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r0, r0, 0xffffffffffffffff, r0, r0], 0x0, 0x10, 0x9}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x29b9, 0xc0000000, 0x3, 0x7}, 0x3, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 2.798554063s ago: executing program 0 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000000)='\x00', 0x6982c2, &(0x7f0000000040)={@align=0x10, {0x0, 0x400, 0x0, 0xa5b}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0xb4ec253}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x1, 0x1, 0xfffb1e00, 0x9d0, 0x2, "945985c7b5367c9bca4618dc146cdacc8f0b3f", 0x7, 0x5}) 2.538176419s ago: executing program 1 (id=16): bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing={0x0, 0x10000003ff}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="feffffff"]}]}, 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2.469336531s ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x901897, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 2.327626244s ago: executing program 2 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) 2.259522556s ago: executing program 1 (id=19): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 2.227333476s ago: executing program 0 (id=20): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x804000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185042, 0x1ef) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) 2.048051021s ago: executing program 3 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x8001, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x108, 0x80a0000, 0x8, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x1, 0xeeee0000, 0x4, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000280)={0xfffffffffffffffe, 0xeeee0000, 0x4, r2, 0x5}) 1.967749153s ago: executing program 2 (id=22): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) sendto$inet6(r1, &(0x7f00000003c0)="1fd3cd769319b31fc20d6646fac13f48b2f7ec15b6b63ef5cd38233423fb13dd9615ec85a5e3", 0x26, 0x24044001, 0x0, 0x0) 1.947874253s ago: executing program 1 (id=23): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlockall(0x0) 1.64238368s ago: executing program 2 (id=24): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d67a10c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa4a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xdef9, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x11) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.419730166s ago: executing program 3 (id=25): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000003c0)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) 1.188923741s ago: executing program 2 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_FLAGS={0x8, 0x8, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) 895.930828ms ago: executing program 2 (id=27): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f00000017c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x10000, 0x4) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) 612.406355ms ago: executing program 1 (id=28): socket$packet(0x11, 0x2, 0x300) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 312.282212ms ago: executing program 3 (id=29): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xfffffff9}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) 268.813473ms ago: executing program 2 (id=30): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 236.130944ms ago: executing program 0 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000009000300060000000400040008000600", @ANYRES32=r1], 0x5c}, 0x1, 0xf000}, 0x0) 234.441224ms ago: executing program 1 (id=32): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000940)={'sit0\x00', {0x2, 0x4e24, @multicast1}}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000280)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000007c0)='_', 0x1, 0x4008004, 0x0, 0x0) 0s ago: executing program 1 (id=33): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) ppoll(&(0x7f0000000000)=[{r0, 0xd}], 0x1, 0x0, 0x0, 0x0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f0000000140)=0x0) timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 73.214379][ T5768] cgroup: Unknown subsys name 'net' [ 73.349733][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.700900][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.053438][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.061903][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.072718][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.081953][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.092108][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.100710][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.109199][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.118856][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.128806][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.129082][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.136168][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.152143][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.160065][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.169107][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.176456][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.193709][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.194955][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.208632][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.217364][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.223030][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.232477][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.246305][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.253467][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.264103][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.618286][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 76.737127][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 76.786282][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 76.800561][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.807981][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.815573][ T5788] bridge_slave_0: entered allmulticast mode [ 76.822774][ T5788] bridge_slave_0: entered promiscuous mode [ 76.860745][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.868288][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.875999][ T5788] bridge_slave_1: entered allmulticast mode [ 76.886857][ T5788] bridge_slave_1: entered promiscuous mode [ 76.976362][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 76.987823][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.995105][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.002247][ T5783] bridge_slave_0: entered allmulticast mode [ 77.009680][ T5783] bridge_slave_0: entered promiscuous mode [ 77.019216][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.032244][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.066809][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.074722][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.082099][ T5783] bridge_slave_1: entered allmulticast mode [ 77.088927][ T5783] bridge_slave_1: entered promiscuous mode [ 77.120252][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.129214][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.136574][ T5780] bridge_slave_0: entered allmulticast mode [ 77.143994][ T5780] bridge_slave_0: entered promiscuous mode [ 77.151606][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.159560][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.166843][ T5780] bridge_slave_1: entered allmulticast mode [ 77.174302][ T5780] bridge_slave_1: entered promiscuous mode [ 77.201246][ T5788] team0: Port device team_slave_0 added [ 77.220528][ T5788] team0: Port device team_slave_1 added [ 77.237728][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.278055][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.291612][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.317034][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.324207][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.350518][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.372762][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.401588][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.408726][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.437377][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.488801][ T5783] team0: Port device team_slave_0 added [ 77.497875][ T5783] team0: Port device team_slave_1 added [ 77.506552][ T5780] team0: Port device team_slave_0 added [ 77.512683][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.520148][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.527417][ T5784] bridge_slave_0: entered allmulticast mode [ 77.534517][ T5784] bridge_slave_0: entered promiscuous mode [ 77.541877][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.549127][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.556673][ T5784] bridge_slave_1: entered allmulticast mode [ 77.564086][ T5784] bridge_slave_1: entered promiscuous mode [ 77.590524][ T5780] team0: Port device team_slave_1 added [ 77.648072][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.655488][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.681489][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.709751][ T5788] hsr_slave_0: entered promiscuous mode [ 77.716135][ T5788] hsr_slave_1: entered promiscuous mode [ 77.725860][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.738128][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.750022][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.776245][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.788190][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.795813][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.821851][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.834589][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.841579][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.868189][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.882287][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.937930][ T5780] hsr_slave_0: entered promiscuous mode [ 77.947006][ T5780] hsr_slave_1: entered promiscuous mode [ 77.953362][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.961143][ T5780] Cannot create hsr debugfs directory [ 78.018511][ T5784] team0: Port device team_slave_0 added [ 78.038901][ T5783] hsr_slave_0: entered promiscuous mode [ 78.045320][ T5783] hsr_slave_1: entered promiscuous mode [ 78.051757][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.059591][ T5783] Cannot create hsr debugfs directory [ 78.086255][ T5784] team0: Port device team_slave_1 added [ 78.176988][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.184856][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.211168][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.245036][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.252059][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.278303][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.293781][ T5786] Bluetooth: hci1: command tx timeout [ 78.293838][ T5782] Bluetooth: hci3: command tx timeout [ 78.299508][ T5786] Bluetooth: hci0: command tx timeout [ 78.373591][ T5786] Bluetooth: hci2: command tx timeout [ 78.466690][ T5784] hsr_slave_0: entered promiscuous mode [ 78.473181][ T5784] hsr_slave_1: entered promiscuous mode [ 78.479348][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.486988][ T5784] Cannot create hsr debugfs directory [ 78.586656][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.606324][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.616527][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.640275][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.738731][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.756462][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.766132][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.784042][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.865138][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.896621][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.906637][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.927697][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.012290][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.038413][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.048748][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.066291][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.081875][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.125145][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.157831][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.165309][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.212738][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.219937][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.252686][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.287572][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.322658][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.354370][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.361492][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.385567][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.392695][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.410037][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.459266][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.466524][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.517279][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.540452][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.547848][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.598603][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.617910][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.683364][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.690518][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.701985][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.709204][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.827179][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.966854][ T5788] veth0_vlan: entered promiscuous mode [ 80.005190][ T5788] veth1_vlan: entered promiscuous mode [ 80.107723][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.139115][ T5788] veth0_macvtap: entered promiscuous mode [ 80.190064][ T5788] veth1_macvtap: entered promiscuous mode [ 80.230791][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.271967][ T5783] veth0_vlan: entered promiscuous mode [ 80.284470][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.313992][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.322664][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.330789][ T5783] veth1_vlan: entered promiscuous mode [ 80.357874][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.367953][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.377368][ T5786] Bluetooth: hci0: command tx timeout [ 80.383742][ T5786] Bluetooth: hci3: command tx timeout [ 80.383984][ T5782] Bluetooth: hci1: command tx timeout [ 80.394974][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.404514][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.453616][ T5782] Bluetooth: hci2: command tx timeout [ 80.468698][ T5780] veth0_vlan: entered promiscuous mode [ 80.482001][ T5783] veth0_macvtap: entered promiscuous mode [ 80.519616][ T5783] veth1_macvtap: entered promiscuous mode [ 80.539338][ T5780] veth1_vlan: entered promiscuous mode [ 80.593668][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.605242][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.616996][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.649195][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.649981][ T5784] veth0_vlan: entered promiscuous mode [ 80.666863][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.678533][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.691683][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.702753][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.740753][ T5780] veth0_macvtap: entered promiscuous mode [ 80.748801][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.758746][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.767913][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.778347][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.798659][ T5784] veth1_vlan: entered promiscuous mode [ 80.806074][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.823086][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.832538][ T5780] veth1_macvtap: entered promiscuous mode [ 80.917481][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.930753][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.941629][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.953702][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.965810][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.007240][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.023632][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.033929][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.046804][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.058217][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.071248][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.080358][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.089925][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.099667][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.129141][ T5784] veth0_macvtap: entered promiscuous mode [ 81.137439][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.153104][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.157101][ T5784] veth1_macvtap: entered promiscuous mode [ 81.255232][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.261754][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.274697][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.284623][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.285655][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.304736][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.315002][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.327534][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.366569][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.407216][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.428239][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.438624][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.463851][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.477275][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.488178][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.502697][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.549654][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.561733][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.575998][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.585493][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.596794][ T5852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6'. [ 81.677578][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.717098][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.742882][ C1] hrtimer: interrupt took 66577 ns [ 81.960586][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.970114][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.049882][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.081693][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.138399][ T5858] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.153067][ T5858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.160605][ T5858] IPv6: NLM_F_CREATE should be set when creating new route [ 82.189002][ T5860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.197472][ T5860] IPv6: NLM_F_CREATE should be set when creating new route [ 82.396046][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.463043][ T5782] Bluetooth: hci3: command tx timeout [ 82.468557][ T5782] Bluetooth: hci0: command tx timeout [ 82.468604][ T5786] Bluetooth: hci1: command tx timeout [ 82.474742][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.533385][ T5786] Bluetooth: hci2: command tx timeout [ 83.876294][ T5891] syz.0.20[5891]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.044848][ T5893] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.406412][ T5902] input: syz1 as /devices/virtual/input/input5 [ 84.534969][ T5782] Bluetooth: hci0: command tx timeout [ 84.534973][ T5786] Bluetooth: hci1: command tx timeout [ 84.535017][ T5786] Bluetooth: hci3: command tx timeout [ 84.614680][ T5786] Bluetooth: hci2: command tx timeout [ 85.026181][ T5891] loop0: detected capacity change from 0 to 32768 [ 85.180164][ T28] audit: type=1800 audit(1786173035.191:2): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 85.211834][ T5909] loop2: detected capacity change from 0 to 2048 [ 85.368943][ T5909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.412620][ T5915] netlink: 'syz.1.28': attribute type 4 has an invalid length. [ 85.659608][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.030835][ T27] cfg80211: failed to load regulatory.db [ 133.098452][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.105929][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.543833][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.551859][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.739468][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 201.747237][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 201.754056][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 201.761270][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 236.773058][ T29] INFO: task kworker/u4:1:12 blocked for more than 143 seconds. [ 236.780976][ T29] Not tainted syzkaller #0 [ 236.786136][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.795199][ T29] task:kworker/u4:1 state:D stack:22928 pid:12 ppid:2 flags:0x00004000 [ 236.808574][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 236.814700][ T29] Call Trace: [ 236.818001][ T29] [ 236.820955][ T29] __schedule+0x15ae/0x4660 [ 236.829807][ T29] ? lock_chain_count+0x20/0x20 [ 236.834778][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 236.841730][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 236.855712][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 236.861951][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 236.871215][ T29] ? asan.module_dtor+0x20/0x20 [ 236.877529][ T29] ? blk_check_plugged+0x250/0x250 [ 236.882695][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 236.891823][ T29] ? wq_worker_sleeping+0x63/0x240 [ 236.897106][ T29] schedule+0xbd/0x170 [ 236.901207][ T29] io_schedule+0x80/0xd0 [ 236.909743][ T29] bit_wait_io+0x11/0xd0 [ 236.914907][ T29] __wait_on_bit_lock+0xc2/0x560 [ 236.919896][ T29] ? bit_wait+0xd0/0xd0 [ 236.928315][ T29] out_of_line_wait_on_bit_lock+0x13c/0x190 [ 236.942585][ T29] ? bit_wait+0xd0/0xd0 [ 236.952080][ T29] ? __wait_on_bit_lock+0x560/0x560 [ 236.958792][ T29] ? bit_waitqueue+0x30/0x30 [ 236.968669][ T29] do_get_write_access+0x1a9/0xe00 [ 236.974783][ T29] ? jbd2_journal_add_journal_head+0x44b/0x4c0 [ 236.980996][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 236.991284][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 236.997582][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 237.003972][ T29] ext4_mb_mark_diskspace_used+0x1c3/0x14b0 [ 237.009911][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 237.021080][ T29] ? ext4_discard_allocated_blocks+0x620/0x620 [ 237.027432][ T29] ext4_mb_new_blocks+0x105b/0x42f0 [ 237.032686][ T29] ? ext4_find_extent+0x1f5/0xcd0 [ 237.044734][ T29] ? rcu_is_watching+0x15/0xb0 [ 237.049583][ T29] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 237.055943][ T29] ? ext4_inode_to_goal_block+0x317/0x450 [ 237.062199][ T29] ext4_ext_map_blocks+0x1811/0x68c0 [ 237.068239][ T29] ? __might_sleep+0xe0/0xe0 [ 237.073097][ T29] ? ext4_ext_release+0x10/0x10 [ 237.077977][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.085139][ T29] ? ext4_es_lookup_extent+0x601/0x9f0 [ 237.090660][ T29] ext4_map_blocks+0x9db/0x1a90 [ 237.095906][ T29] ? ext4_issue_zeroout+0x250/0x250 [ 237.101146][ T29] ? rcu_is_watching+0x15/0xb0 [ 237.106059][ T29] ? ext4_inode_journal_mode+0x376/0x460 [ 237.112078][ T29] ext4_do_writepages+0x1463/0x3990 [ 237.117441][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 237.124621][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 237.130168][ T29] ? __lock_acquire+0x1336/0x7d80 [ 237.135341][ T29] ext4_writepages+0x1dd/0x350 [ 237.140147][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 237.145859][ T29] ? reacquire_held_locks+0x31f/0x5c0 [ 237.151274][ T29] ? writeback_sb_inodes+0x35e/0x1020 [ 237.156737][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 237.161704][ T29] do_writepages+0x351/0x590 [ 237.166395][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 237.172156][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 237.177798][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.182928][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 237.188002][ T29] __writeback_single_inode+0x14e/0xee0 [ 237.193716][ T29] writeback_sb_inodes+0x813/0x1020 [ 237.198974][ T29] ? queue_io+0x530/0x530 [ 237.203466][ T29] __writeback_inodes_wb+0x114/0x240 [ 237.208794][ T29] wb_writeback+0x472/0xbe0 [ 237.217545][ T29] ? queue_io+0x391/0x530 [ 237.221937][ T29] ? percpu_ref_tryget+0x250/0x250 [ 237.227129][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 237.233403][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.238475][ T29] wb_workfn+0xad7/0xe60 [ 237.242760][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 237.249863][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 237.259056][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.264163][ T29] ? read_lock_is_recursive+0x20/0x20 [ 237.269565][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.274940][ T29] ? process_scheduled_works+0x975/0x1600 [ 237.280697][ T29] ? process_scheduled_works+0x975/0x1600 [ 237.286525][ T29] process_scheduled_works+0xa60/0x1600 [ 237.292126][ T29] ? worker_attach_to_pool+0x370/0x370 [ 237.297689][ T29] ? assign_work+0x3cc/0x5d0 [ 237.302308][ T29] worker_thread+0xa5e/0xfe0 [ 237.307297][ T29] kthread+0x2fa/0x390 [ 237.311395][ T29] ? pr_cont_work+0x550/0x550 [ 237.316372][ T29] ? kthread_blkcg+0xd0/0xd0 [ 237.320992][ T29] ret_from_fork+0x48/0x80 [ 237.325742][ T29] ? kthread_blkcg+0xd0/0xd0 [ 237.330367][ T29] ret_from_fork_asm+0x11/0x20 [ 237.335504][ T29] [ 237.338667][ T29] INFO: task jbd2/sda1-8:5107 blocked for more than 143 seconds. [ 237.350907][ T29] Not tainted syzkaller #0 [ 237.355942][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.364664][ T29] task:jbd2/sda1-8 state:D stack:25736 pid:5107 ppid:2 flags:0x00004000 [ 237.373948][ T29] Call Trace: [ 237.377254][ T29] [ 237.380207][ T29] __schedule+0x15ae/0x4660 [ 237.385004][ T29] ? asan.module_dtor+0x20/0x20 [ 237.389891][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.395033][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 237.400963][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 237.406532][ T29] schedule+0xbd/0x170 [ 237.410629][ T29] io_schedule+0x80/0xd0 [ 237.417467][ T29] bit_wait_io+0x11/0xd0 [ 237.421755][ T29] __wait_on_bit+0x9f/0x2c0 [ 237.426339][ T29] ? bit_wait+0xd0/0xd0 [ 237.430528][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 237.436062][ T29] ? bit_wait+0xd0/0xd0 [ 237.440245][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 237.445298][ T29] ? do_raw_write_lock+0x11e/0x260 [ 237.450442][ T29] ? bit_waitqueue+0x30/0x30 [ 237.457239][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 237.462311][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 237.468977][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 237.475977][ T29] ? lock_chain_count+0x20/0x20 [ 237.480872][ T29] ? _raw_spin_unlock+0x40/0x40 [ 237.485825][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 237.491491][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 237.496946][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.502004][ T29] ? timer_delete_sync+0x20/0x20 [ 237.507053][ T29] kjournald2+0x40f/0x810 [ 237.511423][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 237.516690][ T29] ? wake_bit_function+0x200/0x200 [ 237.521835][ T29] ? _raw_spin_unlock+0x40/0x40 [ 237.526828][ T29] ? __kthread_parkme+0x71/0x1c0 [ 237.531820][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 237.536908][ T29] kthread+0x2fa/0x390 [ 237.541001][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 237.546291][ T29] ? kthread_blkcg+0xd0/0xd0 [ 237.550910][ T29] ret_from_fork+0x48/0x80 [ 237.556091][ T29] ? kthread_blkcg+0xd0/0xd0 [ 237.560711][ T29] ret_from_fork_asm+0x11/0x20 [ 237.565700][ T29] [ 237.568770][ T29] INFO: task syz.3.29:5916 blocked for more than 144 seconds. [ 237.576390][ T29] Not tainted syzkaller #0 [ 237.581345][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.590060][ T29] task:syz.3.29 state:D stack:26328 pid:5916 ppid:5783 flags:0x00004004 [ 237.599371][ T29] Call Trace: [ 237.602667][ T29] [ 237.605686][ T29] __schedule+0x15ae/0x4660 [ 237.610235][ T29] ? mark_lock+0x94/0x320 [ 237.614647][ T29] ? asan.module_dtor+0x20/0x20 [ 237.619521][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.624631][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 237.630552][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 237.635847][ T29] schedule+0xbd/0x170 [ 237.639947][ T29] io_schedule+0x80/0xd0 [ 237.644739][ T29] bit_wait_io+0x11/0xd0 [ 237.649018][ T29] __wait_on_bit+0x9f/0x2c0 [ 237.654831][ T29] ? bit_wait+0xd0/0xd0 [ 237.659698][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 237.665244][ T29] ? bit_wait+0xd0/0xd0 [ 237.669426][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 237.674557][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 237.679634][ T29] ? bit_waitqueue+0x30/0x30 [ 237.684633][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 237.689869][ T29] do_get_write_access+0x5c9/0xe00 [ 237.695366][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 237.701382][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 237.708001][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 237.715874][ T29] ? __might_sleep+0xe0/0xe0 [ 237.720971][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 237.727550][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 237.734002][ T29] ext4_dirty_inode+0xcb/0x110 [ 237.739260][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 237.746410][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 237.751534][ T29] file_update_time+0x187/0x1a0 [ 237.756625][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 237.762415][ T29] ? lock_chain_count+0x20/0x20 [ 237.767435][ T29] ? filemap_fault+0x103c/0x1540 [ 237.772458][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 237.778775][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 237.784165][ T29] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 237.790357][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 237.796741][ T29] ? folio_unlock+0x4b/0x2f0 [ 237.801364][ T29] do_page_mkwrite+0x153/0x3f0 [ 237.806203][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 237.811170][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 237.816321][ T29] ? numa_migrate_prep+0x350/0x350 [ 237.821484][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 237.827838][ T29] do_user_addr_fault+0x736/0x12d0 [ 237.833115][ T29] exc_page_fault+0x64/0x100 [ 237.837742][ T29] asm_exc_page_fault+0x26/0x30 [ 237.842713][ T29] RIP: 0033:0x7f0206072eb2 [ 237.847201][ T29] RSP: 002b:00007ffc2c98aaa0 EFLAGS: 00010202 [ 237.853379][ T29] RAX: 0000000000001008 RBX: 00007f0206f55720 RCX: 0000000000000000 [ 237.862061][ T29] RDX: 0000001b2e523000 RSI: 0000000000000008 RDI: 00007f0206f55720 [ 237.870141][ T29] RBP: 0000000000000579 R08: 00007f0206410000 R09: 00007f0206426128 [ 237.878214][ T29] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff8a7a2763 [ 237.886270][ T29] R13: 00007f0206426128 R14: 0000000000000185 R15: fffffffffffff000 [ 237.894775][ T29] ? mtree_load+0x803/0x840 [ 237.899337][ T29] [ 237.902770][ T29] INFO: task syz.2.30:5920 blocked for more than 144 seconds. [ 237.917319][ T29] Not tainted syzkaller #0 [ 237.922267][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.931004][ T29] task:syz.2.30 state:D stack:27048 pid:5920 ppid:5788 flags:0x00004004 [ 237.940361][ T29] Call Trace: [ 237.943767][ T29] [ 237.946723][ T29] __schedule+0x15ae/0x4660 [ 237.951275][ T29] ? mark_lock+0x94/0x320 [ 237.955848][ T29] ? asan.module_dtor+0x20/0x20 [ 237.960729][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 237.966527][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 237.972476][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 237.983010][ T29] schedule+0xbd/0x170 [ 237.987883][ T29] io_schedule+0x80/0xd0 [ 237.992476][ T29] bit_wait_io+0x11/0xd0 [ 237.998285][ T29] __wait_on_bit+0x9f/0x2c0 [ 238.006182][ T29] ? bit_wait+0xd0/0xd0 [ 238.010381][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 238.016967][ T29] ? bit_wait+0xd0/0xd0 [ 238.021157][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 238.026095][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 238.031155][ T29] ? bit_waitqueue+0x30/0x30 [ 238.040109][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 238.045414][ T29] do_get_write_access+0x5c9/0xe00 [ 238.050576][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 238.057655][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 238.063903][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 238.071364][ T29] ? __might_sleep+0xe0/0xe0 [ 238.076304][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 238.081901][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 238.087693][ T29] ext4_dirty_inode+0xcb/0x110 [ 238.092494][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 238.098590][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 238.103859][ T29] file_update_time+0x187/0x1a0 [ 238.108751][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 238.114142][ T29] ? filemap_fault+0x103c/0x1540 [ 238.119121][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 238.125146][ T29] ? pte_alloc_one+0x3b6/0x540 [ 238.129947][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 238.136617][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 238.141861][ T29] do_page_mkwrite+0x153/0x3f0 [ 238.146914][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 238.151891][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 238.157102][ T29] ? numa_migrate_prep+0x350/0x350 [ 238.162270][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 238.169367][ T29] do_user_addr_fault+0x736/0x12d0 [ 238.174874][ T29] exc_page_fault+0x64/0x100 [ 238.179510][ T29] asm_exc_page_fault+0x26/0x30 [ 238.184733][ T29] RIP: 0033:0x7fdcc4c72789 [ 238.189174][ T29] RSP: 002b:00007ffe2db28d10 EFLAGS: 00010202 [ 238.196536][ T29] RAX: 0000001b2e424000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 238.204843][ T29] RDX: 0000001b2e423ffc RSI: 00000000005ffde8 RDI: 00007fdcc5b55700 [ 238.212954][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fdcc5012000 [ 238.220959][ T29] R10: 00007fdcc5b55700 R11: 0000000000000000 R12: 0000000000000000 [ 238.229126][ T29] R13: 0000000000005cac R14: ffffffff81321540 R15: 00007fdcc5b55720 [ 238.237183][ T29] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 238.243350][ T29] [ 238.246415][ T29] INFO: task syz.1.33:5922 blocked for more than 144 seconds. [ 238.254083][ T29] Not tainted syzkaller #0 [ 238.259080][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.267851][ T29] task:syz.1.33 state:D stack:26824 pid:5922 ppid:5780 flags:0x00004004 [ 238.278431][ T29] Call Trace: [ 238.281744][ T29] [ 238.284785][ T29] __schedule+0x15ae/0x4660 [ 238.289345][ T29] ? mark_lock+0x94/0x320 [ 238.293811][ T29] ? asan.module_dtor+0x20/0x20 [ 238.298689][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 238.304756][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 238.310690][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 238.315992][ T29] schedule+0xbd/0x170 [ 238.320135][ T29] io_schedule+0x80/0xd0 [ 238.324476][ T29] bit_wait_io+0x11/0xd0 [ 238.328756][ T29] __wait_on_bit+0x9f/0x2c0 [ 238.333456][ T29] ? bit_wait+0xd0/0xd0 [ 238.337655][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 238.343256][ T29] ? bit_wait+0xd0/0xd0 [ 238.347447][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 238.352233][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 238.357339][ T29] ? bit_waitqueue+0x30/0x30 [ 238.361954][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 238.367218][ T29] do_get_write_access+0x5c9/0xe00 [ 238.373864][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 238.380923][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 238.387797][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 238.395674][ T29] ? __might_sleep+0xe0/0xe0 [ 238.400313][ T29] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 238.409606][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 238.415375][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 238.420901][ T29] ext4_dirty_inode+0xcb/0x110 [ 238.428930][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 238.434832][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 238.439891][ T29] file_update_time+0x187/0x1a0 [ 238.445009][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 238.450075][ T29] ? filemap_fault+0x103c/0x1540 [ 238.455081][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 238.460823][ T29] ? pte_alloc_one+0x3b6/0x540 [ 238.465660][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 238.471935][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 238.477699][ T29] do_page_mkwrite+0x153/0x3f0 [ 238.482512][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 238.487524][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 238.492504][ T29] ? numa_migrate_prep+0x350/0x350 [ 238.497691][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 238.503062][ T29] do_user_addr_fault+0x736/0x12d0 [ 238.508215][ T29] exc_page_fault+0x64/0x100 [ 238.514844][ T29] asm_exc_page_fault+0x26/0x30 [ 238.519738][ T29] RIP: 0033:0x7f8f9326ba23 [ 238.524241][ T29] RSP: 002b:00007fff4a1578d0 EFLAGS: 00010246 [ 238.530335][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2dd64000 [ 238.538608][ T29] RDX: 0000001b2dd24000 RSI: 0000000000600000 RDI: 00007f8f935e0708 [ 238.546674][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.554812][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 238.562803][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff4a157b60 [ 238.570886][ T29] [ 238.573985][ T29] INFO: task syz.0.31:5924 blocked for more than 145 seconds. [ 238.582125][ T29] Not tainted syzkaller #0 [ 238.587409][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.596152][ T29] task:syz.0.31 state:D stack:27464 pid:5924 ppid:5784 flags:0x00004004 [ 238.605429][ T29] Call Trace: [ 238.608752][ T29] [ 238.611698][ T29] __schedule+0x15ae/0x4660 [ 238.616367][ T29] ? mark_lock+0x94/0x320 [ 238.620724][ T29] ? asan.module_dtor+0x20/0x20 [ 238.626942][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 238.632021][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 238.638336][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 238.643820][ T29] schedule+0xbd/0x170 [ 238.647916][ T29] io_schedule+0x80/0xd0 [ 238.652186][ T29] bit_wait_io+0x11/0xd0 [ 238.656530][ T29] __wait_on_bit+0x9f/0x2c0 [ 238.661067][ T29] ? bit_wait+0xd0/0xd0 [ 238.665415][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 238.670907][ T29] ? bit_wait+0xd0/0xd0 [ 238.675152][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 238.680596][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 238.685704][ T29] ? bit_waitqueue+0x30/0x30 [ 238.690339][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 238.696063][ T29] do_get_write_access+0x5c9/0xe00 [ 238.701237][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 238.707300][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 238.713533][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 238.719724][ T29] ? __might_sleep+0xe0/0xe0 [ 238.724391][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 238.730058][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 238.735654][ T29] ext4_dirty_inode+0xcb/0x110 [ 238.740451][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 238.746380][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 238.751442][ T29] file_update_time+0x187/0x1a0 [ 238.756376][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 238.761432][ T29] ? filemap_fault+0x103c/0x1540 [ 238.767354][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 238.773294][ T29] ? pte_alloc_one+0x3b6/0x540 [ 238.778096][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 238.785566][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 238.790634][ T29] do_page_mkwrite+0x153/0x3f0 [ 238.795482][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 238.800716][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 238.807790][ T29] ? numa_migrate_prep+0x350/0x350 [ 238.816559][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 238.821904][ T29] do_user_addr_fault+0x736/0x12d0 [ 238.827185][ T29] exc_page_fault+0x64/0x100 [ 238.831808][ T29] ? clear_bhb_loop+0x40/0x90 [ 238.838675][ T29] asm_exc_page_fault+0x26/0x30 [ 238.843638][ T29] RIP: 0033:0x7f81d3e6ba23 [ 238.848072][ T29] RSP: 002b:00007ffdac69f2f0 EFLAGS: 00010246 [ 238.855381][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2dc64000 [ 238.863566][ T29] RDX: 0000001b2dc24000 RSI: 0000000000600000 RDI: 00007f81d41e0708 [ 238.871567][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.879643][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 238.889088][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdac69f580 [ 238.902173][ T29] [ 238.911498][ T29] [ 238.911498][ T29] Showing all locks held in the system: [ 238.919401][ T29] 7 locks held by kworker/u4:1/12: [ 238.929697][ T29] #0: ffff888141a75938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 238.941268][ T29] #1: ffffc90000117d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 238.954144][ T29] #2: ffff88814e5d20e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 238.964835][ T29] #3: ffff88814e5d4c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 238.975440][ T29] #4: ffff88814e5d6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 238.986235][ T29] #5: ffff88802ec45288 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 238.997541][ T29] #6: ffffe8ffffc1fbe8 (&lg->lg_mutex){+.+.}-{3:3}, at: ext4_mb_initialize_context+0x8af/0xc80 [ 239.008134][ T29] 1 lock held by khungtaskd/29: [ 239.020663][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 239.030640][ T29] 2 locks held by kworker/1:2/789: [ 239.035859][ T29] #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 239.046921][ T29] #1: ffffc90003a17d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 239.059071][ T29] 2 locks held by getty/5541: [ 239.063803][ T29] #0: ffff88802cc5d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 239.073680][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 239.083901][ T29] 3 locks held by syz-executor/5768: [ 239.089927][ T29] #0: ffff88807e7ee0a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 239.102295][ T29] #1: ffff88814e5d2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 239.115797][ T29] #2: ffff88814e5d6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 239.125918][ T29] 3 locks held by syz.3.29/5916: [ 239.130875][ T29] #0: ffff88801d3194a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 239.141312][ T29] #1: ffff88814e5d2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 239.151190][ T29] #2: ffff88814e5d6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 239.161085][ T29] 3 locks held by syz.2.30/5920: [ 239.166092][ T29] #0: ffff88801d3181a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 239.176189][ T29] #1: ffff88814e5d2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 239.186215][ T29] #2: ffff88814e5d6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 239.196983][ T29] 3 locks held by syz.1.33/5922: [ 239.201947][ T29] #0: ffff88801d31d720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 239.212007][ T29] #1: ffff88814e5d2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 239.221964][ T29] #2: ffff88814e5d6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 239.231733][ T29] 3 locks held by syz.0.31/5924: [ 239.236758][ T29] #0: ffff88807c0414a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 239.246787][ T29] #1: ffff88814e5d2510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 239.257692][ T29] #2: ffff88814e5d6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 239.267610][ T29] 2 locks held by dhcpcd/5952: [ 239.272395][ T29] #0: ffff888070b40820 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 239.282739][ T29] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 239.294513][ T29] [ 239.296864][ T29] ============================================= [ 239.296864][ T29] [ 239.306313][ T29] NMI backtrace for cpu 0 [ 239.310680][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 239.317901][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.327985][ T29] Call Trace: [ 239.331278][ T29] [ 239.334223][ T29] dump_stack_lvl+0x18c/0x250 [ 239.338916][ T29] ? __wake_up_klogd+0xd9/0x100 [ 239.343787][ T29] ? show_regs_print_info+0x20/0x20 [ 239.349007][ T29] ? load_image+0x420/0x420 [ 239.353541][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 239.358505][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 239.364693][ T29] ? load_image+0x420/0x420 [ 239.369397][ T29] ? wq_watchdog_touch+0xef/0x170 [ 239.374442][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 239.380531][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 239.386525][ T29] watchdog+0xf59/0xfa0 [ 239.390698][ T29] ? watchdog+0x1e1/0xfa0 [ 239.395041][ T29] kthread+0x2fa/0x390 [ 239.399124][ T29] ? hungtask_pm_notify+0x50/0x50 [ 239.404165][ T29] ? kthread_blkcg+0xd0/0xd0 [ 239.408759][ T29] ret_from_fork+0x48/0x80 [ 239.413184][ T29] ? kthread_blkcg+0xd0/0xd0 [ 239.417777][ T29] ret_from_fork_asm+0x11/0x20 [ 239.422577][ T29] [ 239.426628][ T29] Sending NMI from CPU 0 to CPUs 1: [ 239.431882][ C1] NMI backtrace for cpu 1 [ 239.431892][ C1] CPU: 1 PID: 3556 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 239.431909][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.431918][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 239.431940][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 239.431959][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 2b 8c 2b 03 66 2e 0f 1f 84 00 00 00 00 00 [ 239.431970][ C1] RSP: 0018:ffffc900001f0e80 EFLAGS: 00000046 [ 239.431982][ C1] RAX: 00000000000005a0 RBX: ffff8880b8f282c0 RCX: 0000000000000838 [ 239.431992][ C1] RDX: 0000000000000000 RSI: 00000000000005a0 RDI: 0000000000000838 [ 239.432001][ C1] RBP: 0000000000000000 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 239.432011][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: dffffc0000000000 [ 239.432022][ C1] R13: 0000000010008637 R14: 00000000000005a0 R15: 0000000000000020 [ 239.432031][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 239.432044][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.432054][ C1] CR2: 0000560fa8c65660 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 239.432067][ C1] Call Trace: [ 239.432072][ C1] [ 239.432076][ C1] lapic_next_event+0x11/0x20 [ 239.432094][ C1] clockevents_program_event+0x1c0/0x310 [ 239.432118][ C1] hrtimer_interrupt+0x565/0x980 [ 239.432145][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 239.432171][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 239.432192][ C1] [ 239.432196][ C1] [ 239.432201][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 239.432218][ C1] RIP: 0010:stack_trace_save+0x24/0x100 [ 239.432238][ C1] Code: 00 00 00 0f 1f 00 f3 0f 1e fa 55 48 89 e5 41 56 53 48 83 e4 e0 48 81 ec 80 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 44 24 78 <48> 8d 44 24 20 48 c7 04 24 b3 8a b5 41 48 c7 44 24 08 cf a7 7e 8c [ 239.432249][ C1] RSP: 0018:ffffc9000cfc76e0 EFLAGS: 00000282 [ 239.432260][ C1] RAX: 4af9bb9daa6a1600 RBX: 0000000000000820 RCX: 0000000000000000 [ 239.432269][ C1] RDX: 0000000000000000 RSI: 0000000000000040 RDI: ffffc9000cfc7790 [ 239.432278][ C1] RBP: ffffc9000cfc7780 R08: ffffc9000cfc7a70 R09: 0000000000000000 [ 239.432288][ C1] R10: ffffc9000cfc7790 R11: fffffbfff223d6be R12: 0000000000000001 [ 239.432298][ C1] R13: 00000000000000f0 R14: ffff88807f885730 R15: ffffc9000cfc7790 [ 239.432316][ C1] ? ret_from_fork_asm+0x11/0x20 [ 239.432337][ C1] ? stack_trace_save+0xaa/0x100 [ 239.432354][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 239.432372][ C1] kasan_set_track+0x4e/0x70 [ 239.432412][ C1] __kasan_slab_alloc+0x6c/0x80 [ 239.432429][ C1] slab_post_alloc_hook+0x6a/0x4d0 [ 239.432453][ C1] kmem_cache_alloc_node+0x1af/0x310 [ 239.432474][ C1] ? __alloc_skb+0x103/0x2c0 [ 239.432491][ C1] __alloc_skb+0x103/0x2c0 [ 239.432507][ C1] nsim_dev_trap_report_work+0x253/0xa90 [ 239.432527][ C1] ? process_scheduled_works+0x975/0x1600 [ 239.432547][ C1] process_scheduled_works+0xa60/0x1600 [ 239.432577][ C1] ? worker_attach_to_pool+0x370/0x370 [ 239.432598][ C1] ? assign_work+0x3cc/0x5d0 [ 239.432618][ C1] worker_thread+0xa5e/0xfe0 [ 239.432641][ C1] ? _raw_spin_unlock+0x40/0x40 [ 239.432660][ C1] ? __kthread_parkme+0x71/0x1c0 [ 239.432678][ C1] kthread+0x2fa/0x390 [ 239.432692][ C1] ? pr_cont_work+0x550/0x550 [ 239.432709][ C1] ? kthread_blkcg+0xd0/0xd0 [ 239.432723][ C1] ret_from_fork+0x48/0x80 [ 239.432740][ C1] ? kthread_blkcg+0xd0/0xd0 [ 239.432755][ C1] ret_from_fork_asm+0x11/0x20 [ 239.432779][ C1] [ 239.820949][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 239.827862][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 239.835096][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.845179][ T29] Call Trace: [ 239.848446][ T29] [ 239.851378][ T29] dump_stack_lvl+0x18c/0x250 [ 239.856047][ T29] ? show_regs_print_info+0x20/0x20 [ 239.861230][ T29] ? load_image+0x420/0x420 [ 239.865726][ T29] panic+0x2ca/0x720 [ 239.869623][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 239.874125][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 239.879652][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 239.885015][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 239.891156][ T29] watchdog+0xf98/0xfa0 [ 239.895298][ T29] ? watchdog+0x1e1/0xfa0 [ 239.899613][ T29] kthread+0x2fa/0x390 [ 239.903673][ T29] ? hungtask_pm_notify+0x50/0x50 [ 239.908696][ T29] ? kthread_blkcg+0xd0/0xd0 [ 239.913264][ T29] ret_from_fork+0x48/0x80 [ 239.917668][ T29] ? kthread_blkcg+0xd0/0xd0 [ 239.922248][ T29] ret_from_fork_asm+0x11/0x20 [ 239.927035][ T29] [ 239.938636][ T29] Kernel Offset: disabled [ 239.942961][ T29] Rebooting in 86400 seconds..